policy-attr-separator
policy-attr-separator = separatorDescription
Specifies the character that WebSEAL uses for the following services:
For the credential policy entitlements service to work properly, a user's DN cannot contain the specified separator. If the user DN contains this separator then WebSEAL fails when attempting to retrieve the user's policy attributes.
- Credential policy entitlements service.
- Registry entitlements service.
Options
separator The character that WebSEAL uses for the credential policy entitlements service and the registry entitlements service. Ensure the chosen character is not present in any User DN values.
Usage: Optional
Default:
By default, WebSEAL uses colon (:) as the separator for these services.
Example:
policy-attr-separator = #Parent topic: [aznapi-configuration] stanza